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Abstract 

We prove a conjecture of Helleseth that claims that for any n > 0, a pair of 
binary maximal linear sequences of period 2 2 ™ — 1 can not have a three- valued 
cross-correlation function. 

1 Introduction 

The binary maximal linear sequences of period 2 m — 1 are the sequences 
of elements in GF(2) of the form {Tr(a rf * + *)}j g ^ where a is a generator 
of GF(2 m )*, Tr: GF(2 m ) GF(2) is the absolute trace, and d and t are 
integers (or integers modulo 2 m — 1) with gcd(d, 2 m — 1) = 1. (See the 
Introduction of [2].) The cross-correlation of any two binary sequences a = 
{oj} and b = {bi} whose periods are divisors of 2 m — 1 is the function 

C a ,b{t) = Y?Zo 2 {- l Y l - tJrbl - In this note > we sha11 take a = i a i} = W"*)} 
and b = {bi} = {Tr (a*)}, where the decimation d has gcd(d, 2 m — 1) = 1. We 
call decimations with d = 1,2,..., 2 m_1 (mod 2 m — 1) trivial decimations 
because {Tr{a 2 i )} is the same sequence as {Tr(a 4 )}. One readily shows 
that Ca t b(i) is the same as 

Cd (t) = Yl {-\) T ^ a ' tx+xd \ 

xGGF(2 m )* 
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For a fixed d, we are interested in how many different values Cd(t) takes 
as t varies over Z/(2 m — 1)Z. We say that Cd(t) is v-valued to mean that 
\{Cd(t): t € Z/(2 m — 1)Z}| = v. Helleseth gave the following criterion for 
determining whether Cd(t) is two- valued. 

Theorem 1.1 (Helleseth [2], Theorem 3.1(d), (g), Theorem 4.1). If d = 
1,2,.. . ,2 m " 1 (mod 2 m ), tfien C d (t) G {-l,2 m - 1} for all t. Otherwise, 
Cd(t) takes at least three different values. 

In the same paper, Helleseth conjectured the following. 

Conjecture 1.2 (Cf. Helleseth [2], Conjecture 5.2). If m is a power of 2, 
Cd{t) is not three-valued. 

In view of Theorem 11.11 this conjecture says that if m is a power of 2, 
then Cd(t) is either two- valued (if d is a trivial decimation) or takes four or 
more values (if d is nontrivial). We prove this conjecture in this note. 

Feng pQ recently proved the following weaker form of Conjecture 11.21 

Theorem 1.3 (Feng [Ij], Theorem 2). If m is a power of 2 and Cd(t) = — 1 
for some value oft, then Cd(t) cannot be three-valued. 

We prove Conjecture 11.21 by proving the following. 

Theorem 1.4. If Cd(t) is three-valued, then Cd(t) = —1 for at least one 
value oft. 

This, combined with Theorem 11.31 immediately implies Conjecture 11.21 

Remark 1.5. One should note that our theorem does not assume m is a 
power of 2, so it is much more general in scope that what is needed. In fact, 
one can prove the same theorem for maximal linear sequences derived from 
fields GF(p m ) with p odd: this (and more) is done in [3]. 

2 Proof of Theorem 11.41 

We shall prefer to work in terms of the Walsh transform, defined as 
W d (a)= £ (_l)^ d +-), 

x£GF(2 m ) 

and it is straightforward to show that 

Wd(Q-*) = 1 + C d {t). 



2 



Thus the values of Wd on GF(2 m )* are just the values of Cd shifted by 1. 
So Cd is three- valued if and only if Wd is three valued on GF(2 m )*. 

We need to establish a few well-known facts before proceeding to the 
proof of Theorem 11.41 First, we need a simple result which, in rough terms, 
states that a sequence cannot be perfectly correlated or anti-correlated to a 
nontrivial decimation of itself. 

Lemma 2.1. If d ^ 1, 2, . . . , 2 m ~ 1 (mod 2 m - 1), then \W d (a)\<2 m . 

Proof. From the definition of Wd(a) as the sum X^gGF(2 m )( — l) Tr( - xd+ax "> of 
2 m terms in {1,-1}, it suffices to prove that the said terms are not all of 
the same sign. The x = term is 1, and so the only way that all the terms 
can have the same sign is if 

Tr(x d + ax) = (x d + x 2d H h x 2m ~ ld ) + a(x + x 2 H h x 2 ™' 1 ) 

equals for all x € GF(2 m ), i.e., if and only if this polynomial is zero modulo 
x 2 " 1 — x. Given our assumption on d, all the exponents of x that appear 
in the polynomial as expressed above are distinct modulo 2 m — 1, so this 
cannot happen. □ 

We consider the first few power moments of Wd, with the rth power 
moment defined to be 

Pr = Yl W ^ a Y> 
a€GF(2 m )* 

where we use the convention 0° = 1 in evaluating Pq. The power moments 
of Cd have been calculated by Helleseth, whence it is easy to obtain those 
of W d . 

Proposition 2.2 (See Helleseth [2]). We have 

(a) P = 2 m - 1, 

(b) P 1 = 2 m , 

(c) P 2 = 2 2m , and 

(d) P 3 = 2 2m \V\, 

where V is the set of roots of 1 + x d + (1 + x) d in GF(2 m ). 

From these one can readily deduce the following, which also appears as 
calculations in pQ. 
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Proposition 2.3. Suppose that Wdifl) is three-valued on GF(2 m )* with val- 
ues A, B, and C, and that W d {a) = C for N c values of a G GF(2 m )*. 
Then 

_ 2 2m - 2 m (A + B) + (2 m - 1)AB 
C ~ (C-A)(C-B) 

and 

2 2m \V\ = 2 2m (A + B + C)- 2 m (AB + BC + CA) + (2 m - 1)ABC, 

where V is the set of roots of 1 + x d + (1 + x) d in GF(2 m ). 

Proof. To get Nc, compute SaeGF(2 m )* (^d( a ) ~~ -^X^d ~~ On the- one 
hand, W d (a) G {A, B, C} implies that the sum is N C (C - A){C - B). On 
the other hand, one can also calculate the sum in terms of power moments 
as P2 — (A + B)Pi + ABPq, and then use the values given in Proposition 
12.21 To get |V|, one can employ the same approach, this time with the sum 
SaeGF(2™)* (Wd(a) - A)(Wd(a) - B)(Wd(a) - C): on the one hand, it is zero, 
and on the other, it can be expressed in terms of Pq, P\, P2, and P3. □ 

This can be used to prove an interesting result about the 2-divisibility 
of the values assumed by Wd(a). 

Lemma 2.4. Suppose that Wd(a) takes precisely three values A, B, and C 
for a G GF(2 m )*. If all three values are non-zero, then 2 m+1 | AB. 

Proof. From Proposition 12.31 we have 

2 2m \V\ = 2 2m (A + B + C)- 2 m {AB + BC + CA) + (2 m - 1) ABC, (1) 

where V is the set of roots of 1 + x d + (1 + x) d in GF(2 m ). Suppose that 
A,B,C ^ 0; then LemmaOshows that A, B, C ^ (mod 2 m ). (We clearly 
have a nontrivial decimation by Theorem 11.11 since Wd is three- valued on 
GF(2 m )*, and hence C d is three-valued.) Then the term (2 m - I) ABC is 
divisible by fewer powers of 2 than the other terms on the right hand side of 
CO), so 2 2m \V\ and ABC have exactly the same power of 2 in their respective 
prime factorizations, and so 2 2m \ABC . Since C ^ (mod 2 m ), this means 
that2 m+1 |AB. □ 

Now we are ready to prove Theorem 11.41 We assume that Cd is three- 
valued and that none of these values is —1 in order to show a contradiction. 
Then Wd(a) is three-valued for a G GF(2 m )* with the three nonzero values 
A, B, C. Note that Proposition [221® shows that 

^ W d (a) = 2"\ 

a€GF(2 m )* 
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so we cannot have A,B,C < 0. Furthermore, by parts (jb]) and (jcj) of the 
same proposition, 

E =2 2m = E ^(«) 2 ' 

v aGGF(2 m )* / aeGF(2 m )* 

so we cannot have A,B,C > 0. Then without loss of generality, we may 
take A < < B and C not between ^4 and B. Then by Proposition 12.31 the 
number Nc of a € GF(2 m )* such that W d {a) = C is 

_ 2 2m -2 m (A + J B) + (2 m -l)AB 
C ~ (C-A)(C-B) ' 

Since C is not between A and 5, the denominator is positive, so 

2 2m _ 2 m^ A + B } + (2 m - \)AB > 0. 

We use Lemma |2. II and the fact that A < and B > to see that 
2 2m _ 2 ^(_(2 m _i) + i) + ( 2 m - l)AB > 0, 

so that AB > -2 m+1 . But by Lemma El and the fact that A < < B, we 
have that < -2 m+1 , which gives the contradiction that completes the 
proof of Theorem 11.41 
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